The one the OpenSSL follows is documented here[0]. There's also the CVSS[1] which covers a broader scope.

[0]: https://www.openssl.org/policies/secpolicy.html

[1]: https://en.wikipedia.org/wiki/CVSS